Hack attempt on one PBX only

[AWS2P]

Hi ,
I have a 3CX hosted pbx on which i can't change anything on port settings and this alone pbx is blacklisting IPs everyday .
It's boring even they are stopped by pbx security, I'd like to be able to do like i do on self hosted to restrain 5060 to SIP provider on IPV4 and V6 and then this prevent infinite listing attempt on pbx side.
For now pbx has already internal 3CX security settings set at high level and just today I 'm up to 100 blacklisted IPs.

On that site I use some Fanvil deskphones , in event log I can see lots and lots of provisioning failure like: (phones are X3SG and X4U all in 2.4.12 fw)
Provisioning file /provisioning/qu4mxxxxxxx8o/firmware/fanvil/version.txt requested by 2a:27a1 could not be generated (deleted part of ipv6)
This tryes are always registred with same French IPV6 adress out of my customers and about 1000kms far from me, near the Germany border.

Of course the Pbx is since it's beginning added to automatic BL.
is there something that you 3CX could do on this ?

 

[SteveITS]

Bit of a long shot but could that 3CX hostname have been in use before? Or maybe that IP was reused.

 

[AWS2P]

Hi @SteveITS ,
well FQDN is really specific so I don't think it can be related to an existing one and for sure it's alive for me since 3 months only. The VM IP is not my choice too , it's hosted 3CX, but of course if unluckyly it was previously already targetted by hackers then it's me now having to deal with that .

today:

 

[AWS2P]

Hi @YiannisH_3CX
New weird thing, since 2 of may I no more receive email notifications from pbxs, nothing has changed on my side on settings, when i try to sent a test email , answer is "sent" so it seems to work but I receive nothing.

i did a check on spams folders on my email server with nothing collected in spam too. So is the 3CX SMTP working properly since a week ?
My email server is no more working with TLS 1.0 nor 1.1 but only 1.2 for security reasons, is that a possible explaination why new emails from 3CX are not delivered?

 

[AWS2P]

@TheodorosG_3CX
following on this email problem, Theodoros answered me on another post that 3CX SMTP works fine, but i'm not so sure about this as like I said no more emails were coming from pbxs.
I decided to set a custom SMTP and then use the test and this time I received the email. Then I reset to 3CX SMTP and I did the same test and this time I received the email.
So it's like if something stay stuck until smtp settings were re-validated

The same behavior on other hosted 3CX PBX, The same changes did the same as above.

 

[AWS2P]

Hi 3CX,
is there possible to force a change of my 3CX hosted VM public IP, the one concerned is bombarded while others stays to 0 blacklisted IPs months after they are on line.
last check tonight